Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
File: M-VCXQNo-C_4W5uEf0EjitWNTlA.cer (raw, json)
Hash identifier: Asz/4MnQZ4TA6dZoPsddMXilg/96dE9jC4EgdTnzz3k=
Subject key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 50FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 23 Jan 2024 04:46:36 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.15.22.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 20:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20733 (0x50fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jan 23 04:46:36 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:c3:fd:e2:2e:6b:19:c6:66:9e:03:4b:7d:
25:43:a1:6a:20:b4:dd:90:f7:fa:0b:fb:4a:78:42:
22:31:44:9a:16:36:d3:56:22:94:64:86:55:f9:04:
60:a9:14:1d:67:45:77:2f:dc:1d:61:86:7e:98:cf:
ab:9d:e1:13:ee:2d:8f:69:9f:c5:15:3b:87:f6:6d:
25:46:e1:dd:ca:15:0a:ac:59:75:67:62:d8:17:d7:
af:c2:a7:7c:0d:94:47:d4:a2:d9:35:d3:34:46:55:
26:12:80:df:f2:c3:5e:25:a7:7f:a2:a3:e2:ef:9d:
17:4a:cf:74:10:72:b2:ff:6d:e6:a8:fd:f5:d0:d8:
1d:7d:82:0f:3d:db:57:93:bc:c9:6c:5f:d9:5d:4b:
3b:f3:7f:23:ca:38:22:17:53:cb:32:f9:bd:04:a1:
73:e1:5e:8f:02:ad:93:83:10:b2:3f:78:02:63:71:
9d:be:fb:62:1d:56:dd:cc:22:26:c5:1d:1d:ea:bf:
86:47:86:ec:0a:d9:b2:d2:59:d8:76:8a:07:bd:c6:
8d:12:c6:49:d7:2e:f2:70:da:36:87:41:be:0f:f8:
0e:47:c6:13:26:a7:ca:e7:62:9c:35:ac:20:64:18:
d5:7f:5c:d7:77:c1:a9:30:37:a9:65:a8:32:69:e8:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.22.0/23
Signature Algorithm: sha256WithRSAEncryption
68:f8:9f:61:ce:50:86:ad:26:bf:60:97:f3:50:4e:a6:88:1c:
1e:38:38:c0:85:a0:e2:f9:6c:2d:a0:4b:de:fe:c0:6f:eb:67:
f7:1c:b5:98:48:ce:c9:33:dc:50:fe:a3:de:3a:2f:60:e1:02:
ce:6c:25:b2:bc:d1:4a:4a:32:41:c6:80:a3:a6:54:ad:fd:f8:
fb:2a:0d:ea:b8:d8:9e:95:b5:45:c5:d9:8c:e5:ea:42:fc:7d:
8f:35:18:90:d5:68:ef:d1:41:cc:75:cd:f5:2e:18:5a:9e:e1:
17:29:01:9e:40:9e:32:45:fc:63:cb:2d:01:39:a9:8e:68:4d:
d5:32:e4:47:66:ad:bf:1a:99:5a:11:fe:3b:c1:c2:55:07:3c:
b1:1f:e4:91:54:82:7b:43:a7:47:60:3b:28:f6:04:70:12:e8:
e4:9e:cc:75:ee:cc:44:cb:e8:21:95:61:91:1a:9e:f7:04:6e:
09:de:63:38:29:c2:3a:47:74:54:46:69:23:64:ce:82:30:89:
4b:2b:62:a3:43:8e:04:a7:d5:35:27:3c:8a:89:32:61:e2:48:
cc:09:d9:b9:3b:6b:da:60:d2:ce:d6:bf:e5:d3:52:4d:fc:9f:
19:d2:b5:94:9c:65:db:42:29:2c:55:a0:e4:9d:a1:b1:a6:b3:
12:08:67:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:44:28 2024 by rpki-client on console-fra.rpki-client.org